security

Choosing a strong password to protect your online accounts is a good idea, but the best way to keep your data secure is to enable two-factor authentication (sometimes called two-step verification) on the accounts that support it. This usually requires you to enter a code sent to you by SMS or generated by an app, and this has long been true of Dropbox's two-factor system. Now, Dropbox is making it easier to access your account securely by adding mobile prompts for two-factor.

If you have read one of our several reviews of Xiaomi phones, such as the Mi Note 2 and Mi 6, you'll know that the software experience just isn't good. MIUI is Xiaomi's heavily modified version of Android, complete with less-than-stellar RAM and Bluetooth management (among other issues). But the ROM has several major security problems, as found by research firm eScan.

Earlier this week Amazon took some of the low-budget manufacturer BLU's phones off the retailer's digital shelves, following allegations that BLU had included spyware in its products. It seems to have been a false alarm, though, as today BLU has announced in a tweet that Amazon is back to stocking its phones. Customers looking to pick up a cheap and capable phone can again purchase them at the US' biggest online merchant.

BLU is one of many low-end phone manufacturers, known for its dirt-cheap unlocked Android phones. But back in November, a security firm discovered spyware on some BLU phones sold in the United States, prompting Amazon to stop selling the affected devices until the issue was resolved.

Password managers are becoming ever more popular the more we manage our lives online. Thankfully, there's a trend toward being more security conscious, and LastPass is a great way to get around the issue of having too much important information to remember. If you're doing it right, and don't just use "Password1234" for everything, LastPass can remember all your login credentials, and its cross-platform apps make them easy to access from anywhere. Now, the company is introducing a new service aimed at family members who need to share data securely with each other.

In June of last year, Google introduced phone prompts that made using two-step verification easier than ever. These proved popular, being more secure and simple to use than SMS codes. In February of this year, Google updated these prompts to show more information about the device attempting to sign into your account. And soon, the company will begin pushing these prompts to users of the older, less seamless SMS two-step verification method.

For as long as I remember, 1Password has been a popular albeit expensive password management solution. Before LastPass and Dashlane came into the picture, most password managers relied on an encrypted locally stored file that you could only open with a master password if you had physical access to the device it was saved on, with clunky manual syncing options between different devices. There were no subscription models (you just paid for the app), no cloud storage, and no security risks unless your device itself was compromised. 1Password kept that model for years, adding some cloud syncing solutions like Dropbox for those who didn't want to keep manually syncing their file, but sticking with the app-based pricing.

Sometimes inaction can be just as dangerous as making a wrong move. That seems to be the case for Samsung, as it appears simply letting a domain expire could have left millions of its customers vulnerable to hackers. Luckily, a security researcher named João Gouveia noticed the potential problem and snapped up the domain before anyone with more nefarious intentions was able to grab it.

There are plenty of home automation and security platforms these days, but some consumers like to stick to what they know, and ADT has been doing home security for a long time. It offers its own camera and sensor systems, all controlled via the Pulse app with support for third-party devices like Nest. People pay monthly for ADT services, and now some of them are feeling rather ripped off after an update to Pulse blocked access on rooted or modified devices.

There are plenty of great home security systems on the market, but most of them are pretty costly. If you're looking for a (relatively) less expensive option, we've got just the deal for you. Now you can get the 3-camera Arlo Pro security system for just $450 ($130 off), as long as you have Amazon Prime.